Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915A8C3/FF947C84FDCF11F08AFC50016C6F56BC/rjnJrCEn_qcOoyYOwW0giDxVdfU.mft
File:                     rjnJrCEn_qcOoyYOwW0giDxVdfU.mft (raw, json)
Hash identifier:          CBtCJKBjHVzbzbL3DL0Rb1ku4DroOptFZgjpW15Kyb4=
Subject key identifier:   EA:E4:4C:D7:7B:C2:84:D0:BD:A3:FB:59:32:C2:CD:C0:30:CB:B7:6A
Authority key identifier: AE:39:C9:AC:21:27:FE:A7:0E:A3:26:0E:C1:6D:20:88:3C:55:75:F5
Certificate issuer:       /CN=A915A8C3/serialNumber=AE39C9AC2127FEA70EA3260EC16D20883C5575F5
Certificate serial:       68
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/rjnJrCEn_qcOoyYOwW0giDxVdfU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915A8C3/FF947C84FDCF11F08AFC50016C6F56BC/rjnJrCEn_qcOoyYOwW0giDxVdfU.mft
Manifest number:          60
Signing time:             Thu 23 Jul 2026 10:07:28 +0000
Manifest this update:     Thu 23 Jul 2026 10:07:27 +0000
Manifest next update:     Thu 30 Jul 2026 10:07:27 +0000
Files and hashes:         1: rjnJrCEn_qcOoyYOwW0giDxVdfU.crl (hash: +YBBjZJPDm9fa4chYeoF5pEmE3eil/u2Te29inHQfsw=)
                          2: 846CC09CFDD011F0A25053256C6F56BC.roa (hash: 7ja/uUA5rNPy4R9clAJYgMLZ/ert4qYvj2qbqmL8TeI=)
                          3: AF8E04FCFDD011F0A09CBC256C6F56BC.roa (hash: 73wflQOmp36ch6aTOQGjf1gpEemRE1RYS0amCkdLkng=)
                          4: 29B85B52FDD011F0BDC391246C6F56BC.roa (hash: sAlz6G2JLzFH/kwpxfqxTZ2W57QZu+Wfp6+JbqONI7s=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915A8C3/FF947C84FDCF11F08AFC50016C6F56BC/rjnJrCEn_qcOoyYOwW0giDxVdfU.crl
                          rsync://rpki.apnic.net/member_repository/A915A8C3/FF947C84FDCF11F08AFC50016C6F56BC/rjnJrCEn_qcOoyYOwW0giDxVdfU.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/rjnJrCEn_qcOoyYOwW0giDxVdfU.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 10:07:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 104 (0x68)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915A8C3, serialNumber=AE39C9AC2127FEA70EA3260EC16D20883C5575F5
        Validity
            Not Before: Jul 23 10:07:27 2026 GMT
            Not After : Jul 30 10:07:27 2026 GMT
        Subject: CN=6a61e7df-7c2a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:5c:56:86:1a:cd:98:2e:38:f3:ee:5c:1b:aa:
                    60:e2:84:42:b1:29:3e:5e:c4:80:df:2e:2d:2e:1c:
                    38:b5:bf:ed:be:05:29:d0:0a:a1:1e:01:cd:78:05:
                    89:91:09:7e:5d:4c:35:91:af:72:21:49:cd:7d:88:
                    7a:6f:7f:eb:67:84:0c:e5:12:ed:29:53:5c:d4:d3:
                    85:c3:65:f7:93:07:fd:b6:f7:30:a8:7f:f3:62:32:
                    58:cf:6f:60:35:c6:7e:75:30:c4:d2:e1:50:1e:87:
                    b0:b8:2c:55:35:a1:5a:58:c8:2e:e4:b7:de:80:fb:
                    2b:1d:94:a0:fc:f4:c7:8f:ce:42:6d:4a:d7:22:ba:
                    16:44:9d:87:ba:98:1b:20:31:00:ae:fd:f9:7b:3b:
                    f3:a5:e6:e9:97:14:9f:5e:4a:ff:77:f9:12:76:21:
                    a5:b1:1a:fd:cd:f1:68:18:3f:aa:c8:c6:77:23:1f:
                    11:fa:59:c6:9e:67:06:ea:04:10:9a:4c:78:32:1e:
                    a5:8a:f7:72:79:14:8d:cd:17:5d:b6:2c:a0:17:69:
                    a0:2e:fc:84:56:6a:62:ff:aa:d5:fc:74:70:a8:82:
                    ec:3e:a5:58:6c:72:07:87:30:fb:04:08:c6:b6:cb:
                    5f:db:48:78:bb:d2:c9:a8:20:36:14:dd:3f:ac:a4:
                    66:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:E4:4C:D7:7B:C2:84:D0:BD:A3:FB:59:32:C2:CD:C0:30:CB:B7:6A
            X509v3 Authority Key Identifier:
                keyid:AE:39:C9:AC:21:27:FE:A7:0E:A3:26:0E:C1:6D:20:88:3C:55:75:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915A8C3/FF947C84FDCF11F08AFC50016C6F56BC/rjnJrCEn_qcOoyYOwW0giDxVdfU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/rjnJrCEn_qcOoyYOwW0giDxVdfU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A8C3/FF947C84FDCF11F08AFC50016C6F56BC/rjnJrCEn_qcOoyYOwW0giDxVdfU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:7d:db:fb:bc:59:8a:f3:fa:b7:09:32:25:0f:c1:b6:df:88:
         b6:9d:8d:aa:3d:d2:89:47:3c:c2:18:2d:3f:f9:79:8e:84:ad:
         b3:16:66:c3:19:b6:6f:6b:32:09:68:85:d0:c9:0e:43:0c:3c:
         57:ba:f7:7e:d1:70:d3:91:82:ae:04:43:3f:03:0a:2d:88:60:
         b5:2a:23:da:ef:83:28:32:b6:4c:31:2d:27:e2:d9:25:a7:07:
         99:05:1b:14:6f:94:91:a9:bd:5a:72:f2:77:39:ed:7f:3b:d8:
         0b:ec:c6:cf:5c:9d:39:dd:2a:bd:bf:1a:07:de:23:3c:50:e7:
         6c:e8:a0:0c:49:ca:6c:0a:fe:67:ab:c7:96:72:60:e9:7e:3b:
         6e:e9:b6:f8:e9:1a:35:ae:ce:35:aa:4d:a5:9a:1f:8d:5e:8b:
         dd:c4:b2:a2:57:b9:52:c5:54:fd:80:16:ef:fe:06:52:82:0c:
         29:a2:f8:48:52:6b:0f:fa:ae:17:6c:47:58:7f:03:4a:fb:f7:
         0c:63:d3:9c:f1:bf:d8:7e:34:34:5e:3c:03:99:08:19:06:13:
         f1:e2:82:de:72:da:5a:38:eb:12:c5:91:f2:cd:44:b1:37:3b:
         71:a0:d3:6f:76:5a:7b:c9:00:50:73:59:b5:55:4f:32:dc:0e:
         d0:15:c3:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:21:40 2026 by rpki-client